Self-Hosted RAG Assistant — Air-Gapped Enterprise RAG | aamp

Use cases RAG assistant

RAG with 100% local data sovereignty

Enterprise RAG where your data never leaves the perimeter.

Vector indexing and inference hosted entirely on-premise — or on an engineer's workstation.

aamp is not a connector to somebody else's RAG service. It is the full toolset: set up a knowledge base and its indexing pipeline, watch retrieval and indexing as they run, and fine-tune the chunk and inference prompts — all from one console, on your own infrastructure.

  • Local embedding
  • Local vector store
  • Air-gap capable
  • Runs on a workstation
01 · What you get

A knowledge base you configure, not accept.

Every part of the pipeline is a setting you own — which model chunks the text, what shape a chunk takes, where indexing runs, and how the agent is told to answer.

What you get 01

Provider and chunking model, bound separately.

Set the base LLM provider and, separately, the chunking and processing model that breaks raw text into structured units — a small model like gpt-4.1-mini is usually the right tool for that job. Neither has to be your default agent model.

knowledge · settings
Knowledge base settings showing LLM Provider, Chunking and processing Model, RAG Indexer Helper VM and Jina Reader Helper fields
SettingsProvider, chunking model, indexing helper and optional URL reader — four bindings, one form.
What you get 02

Indexing runs off your main systems.

A RAG Indexer helper VM handles document indexing in an isolated, one-shot environment. The VLM variant adds Docling and GraniteDocling for scanned or image-based documents. An optional Jina Reader helper fetches URL content and scrapes the web when a source lives outside your files.

helpers · catalogue
The Helpers catalogue with RAG Indexer and RAG Indexer VLM helper cards
HelpersTwo indexer variants, both one-shot: standard for text documents, VLM for scans and images.
What you get 03

Every base is named and documented.

Each base carries a name and description, so repositories are classified and documented rather than accumulating as unlabelled indexes nobody remembers the purpose of.

What you get 04

Chunks come back as structured JSON.

The extraction pipeline emits standardised JSON. Every chunk carries a title, standalone Markdown content and a summary; contextual tags for keywords, entities, topics and questions; and provenance as source pages plus a confidence level.

What you get 05

Querying is a defined workflow, not a guess.

Call knowledge_search with a precise query, read top matches via knowledge_read_document, traverse relationships with read_chunk, then synthesise from retrieved facts — and state plainly when the evidence is not there.

What you get 06

Indexes are host-owned.

Indexes are stored in host-managed environments, so no third-party model provider retains your proprietary documents or trains on them.

See the step-by-step guide Read the docs
02 · How it works

Four steps, one perimeter.

01

Define the base

Name and describe the repository, then bind the LLM provider and the chunking model that will process it.

02

Index on isolated compute

The RAG Indexer helper VM parses and indexes documents away from your main systems. Add the Jina Reader helper when a source is a URL rather than a file.

03

Upload, then index the full base

Raw files sit unindexed until you run indexing. A progress bar tracks raw, processed and doc counts until the helper powers off.

04

Query with grounded answers

The agent searches, reads the top documents, traverses related chunks, and answers from retrieved facts — citing pages, or saying the evidence is absent.

A knowledge base at 100% indexed, showing raw file count, processed count, doc count, and upload / Index Full Base controls
Legal · Healthcare · Financial services · Enterprise IT · Manufacturing Same perimeter, same audit trail.
03 · Why it is secure

Sovereignty is structural here.

Four properties of the design, not four settings you have to remember to switch on.

Security 01

Processing never touches shared memory.

Processing and indexing run on dedicated, isolated virtual machines, keeping raw documents and indexing tasks away from external network vectors and shared memory spaces.

Security 02

Every answer is checkable against a source.

Strict JSON output and page-level source tracking give full traceability. Every answer is verifiable against an internal source document, which is what prevents a confident invention.

Security 03

No third party retains your documents.

Indexes live in host-managed environments, so third-party providers cannot retain proprietary enterprise data or train on it.

Security 04

Missing evidence is stated, not filled in.

Instructing the model to state missing evidence enforces a zero-trust boundary: no unauthorised assumptions, and no leakage across domain scopes.

04 · Who this is for

Sectors where the perimeter is the requirement.

Sector 01

Legal and compliance

Index contracts, regulatory statutes and case law with page-level citation tracing for due diligence and brief preparation.

Sector 02

Healthcare and life sciences

Parse clinical guidelines, medical research and patient care protocols while data stays strictly inside sovereign virtual machines.

Sector 03

Financial services and banking

Query internal audit logs, risk assessments and complex prospectuses without exposing proprietary data to public LLM training pipelines.

Sector 04

Enterprise IT and software engineering

Turn internal codebases, architecture decision records and system logs into structured context for operational support and troubleshooting.

Sector 05

Manufacturing and defence

Index sensitive technical manuals, maintenance schematics and supply chain records on self-hosted or isolated infrastructure to meet sovereignty mandates.

Your sector

Tell us what you need to index

Run it where you can defend it.